Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: v8jG4G45ee5ViEZhviYJp8sHL5yYsERmVUqaShmXVZU=
Subject key identifier: 98:15:67:70:6F:26:95:0B:F7:6D:57:09:BC:77:C4:6B:AD:5E:27:AC
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019D37C10646B2CD95065507B9C505A9EEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 15B2
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: KuAaygWEV32Wst8rOAaAIme63i0qHHtmtHGj2vL8OZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:06:46:b2:cd:95:06:55:07:b9:c5:05:a9:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=981567706f26950bf76d5709bc77c46bad5e27ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:2f:60:05:27:24:61:0c:f4:09:c3:ef:4c:
bb:aa:94:e8:c4:a3:cc:d4:90:ac:1d:c8:ab:ef:c7:
f6:8c:dd:a6:0c:0b:f2:8f:4a:8a:42:be:3c:04:af:
c8:aa:99:9a:65:02:73:ba:0a:83:02:34:26:91:b5:
78:7b:0b:c0:98:4f:2e:cb:74:c2:22:21:8c:a1:d8:
09:d7:48:2b:8e:a8:f8:07:48:08:aa:b9:d6:27:f1:
8b:43:de:99:3a:37:1a:11:ce:8e:39:19:0e:67:b8:
d6:15:ed:d9:81:2b:1e:63:0e:e3:e4:6c:50:a1:41:
f9:82:79:e3:d7:55:f3:6e:c4:d5:b6:46:66:06:f4:
dc:af:97:ae:d7:67:d9:b6:f0:76:c4:7d:ea:f8:74:
0d:bb:df:b3:ba:3e:2a:5b:e9:76:3c:5a:c3:02:fd:
91:65:75:7c:bf:15:82:c3:c4:f1:a1:b5:43:79:70:
f8:60:87:f9:52:6b:66:41:6d:68:c7:b8:ab:16:44:
b3:6b:19:07:39:d0:ee:0f:64:c1:9e:11:d8:73:67:
ab:f9:36:bf:52:48:09:33:93:2b:13:64:15:d3:e0:
0c:8b:0f:c4:c6:37:7c:49:2a:2f:9e:7d:30:53:5b:
7c:3c:60:a1:94:58:d8:0a:17:f3:e2:c2:07:69:1c:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:67:70:6F:26:95:0B:F7:6D:57:09:BC:77:C4:6B:AD:5E:27:AC
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:96:69:6d:55:a3:dd:aa:c1:5a:29:0a:b4:04:27:b3:d5:
cd:53:5b:a2:e6:b3:a4:17:d3:4e:e7:c7:ed:e0:ae:87:90:4f:
96:0b:fe:87:08:d6:c5:8c:5a:ab:a9:26:40:64:c8:60:3e:49:
8f:1e:1a:f4:bf:60:ef:0c:b1:5e:1c:2c:4a:35:e0:2b:72:82:
48:bc:eb:8c:4d:6e:bf:c2:75:b9:05:3a:99:a2:70:ba:6a:af:
f3:50:67:fc:8f:19:0b:1e:f2:65:6d:40:c1:db:9b:6c:aa:c2:
4e:1f:4e:e2:fc:d4:af:27:3d:de:f0:05:89:a7:b5:64:6a:64:
ea:37:69:94:8f:ce:f0:94:ae:c4:ed:72:2d:3d:0a:bc:bb:b2:
3e:2a:e9:51:99:50:2a:f0:dc:e0:cf:62:ad:11:4a:40:22:a8:
5f:58:28:ec:31:42:1b:47:21:7a:e1:9c:cd:22:ac:0e:7f:6e:
5d:43:be:3d:8f:36:af:bd:c9:8f:f4:17:9a:9f:0f:87:ea:e7:
a5:8a:49:af:98:68:52:c6:37:7f:d9:3e:30:12:fa:c1:50:b0:
c9:31:f0:da:d5:da:4f:90:c6:59:ff:a9:6a:af:ee:0b:55:75:
f0:a6:71:96:d4:d9:bf:8f:3a:f2:53:84:fd:ea:1b:ac:2f:98:
f2:11:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:29 2026 by rpki-client